In Australia, a company is its own legal person. It can own assets, sign contracts and owe debts, but it cannot think, decide or act for itself. That is what a board of directors is for. The board is the decision-making engine of the company: the people who set its strategy, appoint and monitor its senior managers, and answer for its compliance with the law. Shareholders own the company, but unless they are also directors the law does not let them run it day to day. That job belongs to the board.
This article explains how that system actually works: who counts as a director (including people who act as one without ever being appointed), how someone becomes a director, the duties that attach the moment they do, and where personal liability bites hardest. It becomes relevant the day you are invited onto a board, the day you appoint directors to a company you have founded, or the day someone tells you that your "advisory" involvement might make you a director. The stakes are practical, not theoretical. The Australian Securities and Investments Commission (ASIC) enforces these rules against directors personally, and the courts have shown that even honest, well-meaning directors can be held liable for what they failed to do.
Who sits on the board
The starting point is the definition in the Corporations Act 2001 (Cth) (the Act). Under s 9AC of the Act, a director of a company is:
- a person appointed to the position of director, or appointed as an alternate director and acting in that capacity, regardless of the name given to their position; and
- unless the contrary intention appears, a person who is not validly appointed but acts in the position of a director, or whose instructions or wishes the board is accustomed to follow.
That second limb is the part that surprises people. It captures "de facto" directors (people who act as directors without formal appointment) and "shadow directors" (people who pull the strings from behind the scenes). Professional advice given in a proper professional capacity is excluded, but almost nothing else is. If the board consistently does what you tell it to, the law may treat you as a director whether or not you ever signed anything.
Within that definition, the people around the board table usually fall into a few groups:
- Shareholders: They own the company and, in the ordinary course, appoint and remove directors. For most private companies the shareholders and directors are the same people, which is why the distinction is easy to forget.
- Executive directors: Employees who also sit on the board, typically the chief executive, chief financial officer or other senior managers. They are involved in the day-to-day running of the business and in governing it.
- Non-executive directors: Board members who are not employees and are not involved in daily operations. They bring independent oversight, challenge management, and are expected to keep the company honest about risk.
- Advisory board members: Experts engaged to give guidance and strategic advice. They have no statutory role, no power to vote on board decisions, and are not automatically directors. Their entire legal position depends on staying on the advisory side of the line in the definition above.
- ASIC: Not on the board, but watching it. ASIC receives the notices and documents the Act requires, and it enforces directors' duties and director ID obligations.
The key point is that your title does not determine your legal position. Section 9AC applies "regardless of the name that is given to their position". An advisory board member who starts making decisions, or a founder who keeps calling the shots after resigning from the board, can find themselves treated as directors with all the duties and liabilities that go with it.
Becoming a director: appointment, registration and the director ID
The mechanics of appointment are straightforward, but each step creates a legal hook.
Minimum numbers
A proprietary company must have at least one director who ordinarily resides in Australia. A public company must have at least three directors, at least two of whom ordinarily reside in Australia (s 201A of the Corporations Act).
Eligibility
A director must be an individual at least 18 years old and must not be disqualified from managing corporations, unless ASIC or a court has permitted the appointment. The Australian Business Registry Services sets out these requirements alongside the director ID rules.
Consent and appointment
Appointment is usually made by the shareholders, or by the board itself where the constitution allows it. Before that happens, the person must agree to act. This is the moment to ask questions, because the duties apply from appointment, not from the first board meeting.
The director ID
Since the director identification number (DIN) regime began, every director must hold a DIN before they can be appointed. It is a single number for life, and you must apply for it yourself in your own name; nobody can apply on your behalf. The obligation sits in Part 9.1A of the Corporations Act: directors must have a DIN (s 1272C), and failing to apply on time is a criminal offence enforced by ASIC.
Notifying ASIC
Once appointed, the company must lodge a notice of the director's personal details with ASIC within 28 days, and must lodge another notice within 28 days if a director stops being one (s 205B of the Corporations Act). A director who resigns without this paperwork being done can remain on the public register, with all the exposure that implies.
What the law requires once you are in the role
Appointment is the trigger. From that moment the general duties in ss 180 to 184 of the Corporations Act apply, and they are not optional extras or matters of good manners. They are enforceable obligations, and most of them are civil penalty provisions, which means ASIC can pursue directors in court for financial penalties.
Care and diligence: s 180(1)
A director must exercise their powers and discharge their duties with the degree of care and diligence that a reasonable person would exercise in the company's circumstances, holding the same office and responsibilities (s 180(1)). This is an objective standard. It is not measured against what you think you are capable of, but against what a reasonable director in your position would do. In practice it means turning up, reading the papers, questioning the numbers and not rubber-stamping decisions.
The business judgment rule: s 180(2)
The same provision gives directors their most important protection. A director who makes a business judgment is taken to have met the standard if they made the judgment in good faith for a proper purpose, had no material personal interest in it, informed themselves to the extent they reasonably believed appropriate, and rationally believed the judgment was in the company's best interests (s 180(2)). The rule does not protect a director who made no judgment at all. Doing nothing is not a business judgment, and that distinction has cost real directors dearly.
Good faith and proper purpose: s 181
Directors must exercise their powers and discharge their duties in good faith in the best interests of the corporation and for a proper purpose (s 181 of the Corporations Act). This is the statutory expression of the old fiduciary duty of loyalty. It is breached when a director acts for their own benefit, or for the benefit of one shareholder at the company's expense, or uses a power for a purpose the law does not recognise.
Conflicts of interest: s 191
If a director has a material personal interest in a matter relating to the company's affairs, they must give the other directors notice of the interest, with details of its nature and extent, at a directors' meeting as soon as practicable after becoming aware of it (s 191 of the Corporations Act). There are sensible exceptions, such as interests that arise purely from being a member or from remuneration as a director, and the section does not apply at all to a proprietary company with a single director. But the general rule is simple: disclose, or do not participate.
Insolvent trading: s 588G
The most financially dangerous duty sits outside the general duties, in s 588G of the Corporations Act. A director must prevent the company from incurring a debt if the company is insolvent at the time, becomes insolvent by incurring it, and there are reasonable grounds for suspecting that. It is a civil penalty provision, and if the director's failure was dishonest it is also a criminal offence. Critically, the standard is partly objective: a reasonable person in the director's position would be aware of the grounds for suspicion, so "I did not know the company was in trouble" is rarely a complete answer.
Where it bites: enforcement, the Cassimatis case and the people who never signed
The duties above are not enforced only against fraudsters. The case that Australian governance lawyers reach for first is Australian Securities and Investments Commission v Cassimatis (No 8) [2016] FCA 1023, available on the Federal Court's judgments site. The Cassimatises were the only directors and shareholders of Storm Financial, a financial advice company. ASIC alleged that they breached s 180(1) by failing to act on the risk that the company's business model could destroy its capital, even though the offending conduct was carried out by the company's advisers, not by the directors themselves. The court found the directors liable, holding that they could contravene s 180(1) even as the only shareholders of a company that was solvent at the relevant time. The litigation ran for years and produced a Full Court appeal in 2020 (Cassimatis v Australian Securities and Investments Commission [2020] FCAFC 52).
Three lessons from that case matter to any small or medium business:
- Directors are liable for what they fail to do: The breach was an omission: the directors did not step in to stop a business model that put everything at risk. Passive directorship is not a defence.
- The board cannot outsource its oversight: The advice was given by employees, not the directors. The court still held the directors responsible for the company's conduct and its consequences.
- Solvency does not immunise a director: The company was solvent at the time, and the directors were its only shareholders, so no one else's interests were directly at stake. The duty of care still applied.
The consequences of breaching these duties are personal. The Act's civil penalty provisions allow courts to order pecuniary penalties, and ASIC can seek orders disqualifying a person from managing corporations, which ends or threatens their involvement in any Australian company. On top of that, insolvent trading can make a director personally liable for the company's debts. Director ID offences are also criminal offences in their own right.
The edge cases deserve attention because they catch people who never intended to be directors:
- Advisory board members who drift across the line: If an advisor starts making decisions, signing off on deals, or directing management, the s 9AC definition can make them a de facto director, with no advisory carve-out in the duties.
- Shadow directors: Someone who never attends a meeting but whose instructions the board follows can be a director for the purposes of the Act. The exclusion for professional advice does not cover a lender, investor or family member who effectively runs the company.
- Non-executive directors: Non-executive directors carry exactly the same statutory duties as executive directors. There is no lighter standard for the person who only attends monthly meetings, which is why they need to be satisfied that the information they are given is reliable before relying on it.
- Resignation that never happened: If ASIC's records still show a person as a director, that person may still be treated as one, and the company's failure to lodge the s 205B notice is not their defence.
Where a lawyer comes in
Directorship is one of the few roles where the personal risk is built into the statutory design, which is why the sensible time to get advice is before, not after, something goes wrong. The situations that most often call for a lawyer's input are:
- Before accepting an appointment: A lawyer can review the company's constitution, its financial position and its solvency, and check whether director and officer (D&O) insurance is in place and what it covers. This is also the time to confirm you can obtain a director ID and understand what the company's records say about you.
- When a conflict arises: Getting advice on whether an interest is material, and how to disclose and manage it, protects the director and the company. Getting it wrong can invalidate decisions and expose the director to claims.
- When the company is struggling: Insolvent trading exposure usually builds up gradually. A lawyer can help map the options, including the formal mechanisms and defences available to directors of companies in financial difficulty, before creditors or a liquidator start asking questions.
- When ASIC or a liquidator comes knocking: A request for documents or a notice of investigation should not be answered off the cuff. A lawyer can advise on what must be produced, what the exposure is, and how to respond without making things worse.
A consultation on any of these points does not have to be expensive, and it is far cheaper than defending a penalty proceeding or a personal liability claim.
The question to ask before you sign
If this article has one message, it is that the risk concentrates at the moment of appointment and in the meetings after it. Liability does not require intent, dishonesty or even fault in the ordinary sense. It attaches to the role, and it is enforced through what directors do and, just as often, through what they fail to do. The Cassimatis case is the clearest illustration: directors held personally liable for an omission, in a solvent company, where they owned everything.
So before you accept an appointment, ask the questions that matter: what is the company's actual financial position, what decisions has the board recently made, is D&O insurance in place, and can you genuinely commit the time? If you are already a director, check the basics this week: your director ID, whether ASIC's records are current, and whether the last set of board papers was something you actually read and understood. Getting a lawyer to walk through the board's current position early is the cheapest insurance a director can buy.